# Kibana index

**URL:** <https://discuss.elastic.co/t/kibana-index/32634>\
**Category:** Kibana\
**Created:** [October 21, 2015, 4:37am UTC](https://discuss.elastic.co/t/kibana-index/32634 "2015-10-21T04:37:20Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![PRAVESH\_SAILOR](https://avatars.discourse-cdn.com/v4/letter/p/4bbf92/32.png) [@PRAVESH\_SAILOR](https://discuss.elastic.co/u/PRAVESH_SAILOR)\
**Post date:** [October 21, 2015, 4:37am UTC](https://discuss.elastic.co/t/kibana-index/32634/1 "2015-10-21T04:37:20Z")

</div>

We have installed kibana and elasticsearch on the same server and want to configure index on kibana but not able to create. Time-field not highlighted also getting error. “Unable to fetch mapping. Do you have indices matching the pattem?”

 ![](https://us1.discourse-cdn.com/elastic/original/2X/4/4acf704a3ad1337385c9305cf2c80d34f5da96b8.png)[http://awesomescreenshot.com/0b05c7mr39](http://awesomescreenshot.com/0b05c7mr39)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 21, 2015, 4:38am UTC](https://discuss.elastic.co/t/kibana-index/32634/2 "2015-10-21T04:38:09Z")

</div>

Do you have any indices in Elasticsearch?

---

<div class="post-metadata">

**Author:** ![PRAVESH\_SAILOR](https://avatars.discourse-cdn.com/v4/letter/p/4bbf92/32.png) [@PRAVESH\_SAILOR](https://discuss.elastic.co/u/PRAVESH_SAILOR)\
**Post date:** [October 21, 2015, 5:04am UTC](https://discuss.elastic.co/t/kibana-index/32634/3 "2015-10-21T05:04:37Z")

</div>

Yes we have

[root@newmaillogs bin]# curl 'localhost:9200/\_cat/indices?v'  
health status index pri rep docs.count docs.deleted store.size pri.store.size  
yellow open .kibana 1 1 1 0 2.5kb 2.5kb  
yellow open @timestep 5 1 0 0 720b 720b  
yellow open test 5 1 0 0 720b 720b  
yellow open shakespeare 5 1 0 0 720b 720b  
yellow open twitter 5 1 0 0 720b 720b  
yellow open customer 5 1 0 0 720b 720b  
[root@newmaillogs bin]#

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 21, 2015, 5:14am UTC](https://discuss.elastic.co/t/kibana-index/32634/4 "2015-10-21T05:14:44Z")

</div>

Right, but you have no `logstash-` type instances, and that is what it is telling you.

---

<div class="post-metadata">

**Author:** ![PRAVESH\_SAILOR](https://avatars.discourse-cdn.com/v4/letter/p/4bbf92/32.png) [@PRAVESH\_SAILOR](https://discuss.elastic.co/u/PRAVESH_SAILOR)\
**Post date:** [October 28, 2015, 3:57am UTC](https://discuss.elastic.co/t/kibana-index/32634/5 "2015-10-28T03:57:05Z")

</div>

How we can create it? do you have any tutorial link

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 28, 2015, 4:13am UTC](https://discuss.elastic.co/t/kibana-index/32634/6 "2015-10-28T04:13:26Z")

</div>

Take a look at [https://www.elastic.co/guide/en/logstash/current/first-event.html](https://www.elastic.co/guide/en/logstash/current/first-event.html)

---

<div class="post-metadata">

**Author:** ![PRAVESH\_SAILOR](https://avatars.discourse-cdn.com/v4/letter/p/4bbf92/32.png) [@PRAVESH\_SAILOR](https://discuss.elastic.co/u/PRAVESH_SAILOR)\
**Post date:** [October 30, 2015, 7:54am UTC](https://discuss.elastic.co/t/kibana-index/32634/7 "2015-10-30T07:54:45Z")

</div>

I have done with that but the Time-field still not showing.

[root@mail logstash]# bin/logstash -e 'input { stdin { } } output { stdout {} }'

2015-10-30T07:51:05.800+0000 mail.bw.ae  
[root@mail logstash]#

---

<div class="post-metadata">

**Author:** ![PRAVESH\_SAILOR](https://avatars.discourse-cdn.com/v4/letter/p/4bbf92/32.png) [@PRAVESH\_SAILOR](https://discuss.elastic.co/u/PRAVESH_SAILOR)\
**Post date:** [October 30, 2015, 7:55am UTC](https://discuss.elastic.co/t/kibana-index/32634/8 "2015-10-30T07:55:29Z")

</div>

[root@mail logstash]# curl 'localhost:9200/\_cat/indices?v'  
health status index pri rep docs.count docs.deleted store.size pri.store.size  
yellow open .kibana 1 1 1 0 2.4kb 2.4kb  
[root@mail logstash]#

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 30, 2015, 8:02am UTC](https://discuss.elastic.co/t/kibana-index/32634/9 "2015-10-30T08:02:59Z")

</div>

Right, but you didn't send the event to Elasticsearch, so have a look at [https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html)

---

<div class="post-metadata">

**Author:** ![PRAVESH\_SAILOR](https://avatars.discourse-cdn.com/v4/letter/p/4bbf92/32.png) [@PRAVESH\_SAILOR](https://discuss.elastic.co/u/PRAVESH_SAILOR)\
**Post date:** [November 9, 2015, 8:57pm UTC](https://discuss.elastic.co/t/kibana-index/32634/10 "2015-11-09T20:57:31Z")

</div>

I have resolved it, now facing issue to creating graph for mail logs, like to sender, receive per hour mail sent from server. How to filter the mail logs?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 9, 2015, 9:28pm UTC](https://discuss.elastic.co/t/kibana-index/32634/11 "2015-11-09T21:28:20Z")

</div>

It depends on how you have indexed the data into ES really.

---

<div class="post-metadata">

**Author:** ![PRAVESH\_SAILOR](https://avatars.discourse-cdn.com/v4/letter/p/4bbf92/32.png) [@PRAVESH\_SAILOR](https://discuss.elastic.co/u/PRAVESH_SAILOR)\
**Post date:** [November 29, 2015, 6:48pm UTC](https://discuss.elastic.co/t/kibana-index/32634/12 "2015-11-29T18:48:44Z")

</div>

> [@warkolm](#):
>
> indices

There are few ready fields in kibana interface using that I tried to create graph but it is not clear.  
For example,a mail log includes sender, receiver . I want to create a graph that how many emails each receiver received but some confusion there. If I use a ' message' files ( message="to=\<" ) then it shows few things from the log but not gathering exact value that how may times the receiver received that email.

Do I need to create a field which will automatically gather count ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:07pm UTC](https://discuss.elastic.co/t/kibana-index/32634/13 "2017-07-06T14:07:58Z")

</div>


